OLVM : Unable To Live Migrate VM Within A Cluster With vdsm.log Reporting [SSL: CERTIFICATE_VERIFY_FAILED] (Doc ID 3054072.1)

Last updated on OCTOBER 23, 2024

Applies to:

Symptoms

Unable to Live Migrate VMs between KVM Hosts in the Cluster.

The engine.log shows:

2024-10-03 08:51:21,363+02 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-136) [9e659413-44c1-4cc2-9ffa-eafa48b3cb0e] 
EVENT_ID: VM_MIGRATION_START(62), Migration started (VM: TEST-VM, Source: Source-KVM, Destination: Destination-KVM, User: admin@internal-authz).

2024-10-03 08:51:21,376+02 ERROR [org.ovirt.engine.core.vdsbroker.monitoring.VmsMonitoring] (ForkJoinPool-1-worker-3) [140fcfa5] Rerun VM 'VM-UUID'. Called from VDS 'Source-KVM'

2024-10-03 08:51:21,393+02 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engine-Thread-60) [140fcfa5] 
EVENT_ID: VM_MIGRATION_TO_SERVER_FAILED(120), Migration failed due to an Error: Fatal error during migration (VM: TEST-VM, Source: Source-KVM, Destination: Destination-KVM).

On the Source KVM Host the following vdsm.logs are observed:

2024-10-03 08:51:21,373+0200 ERROR (migsrc/ba8fedfa) [virt.vm] (vmId='VM-UUID') [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897) (migration:331) <<<<<<

2024-10-03 08:51:21,373+0200 INFO (migsrc/ba8fedfa) [virt.vm] (vmId='VM-UUID') Switching from State.INITIALIZED to State.FAILED (migration:229)
2024-10-03 08:51:21,373+0200 ERROR (migsrc/ba8fedfa) [virt.vm] (vmId='VM-UUID') Failed to migrate (migration:506)
Traceback (most recent call last):
File "/usr/lib/python3.6/site-packages/vdsm/virt/migration.py", line 458, in _regular_run
self._setupVdsConnection()
File "/usr/lib/python3.6/site-packages/vdsm/virt/migration.py", line 283, in _setupVdsConnection
client = self._createClient(port)
File "/usr/lib/python3.6/site-packages/vdsm/virt/migration.py", line 271, in _createClient
client_socket = utils.create_connected_socket(host, int(port), sslctx)
File "/usr/lib/python3.6/site-packages/vdsm/utils.py", line 362, in create_connected_socket
sock.connect((host, port))
File "/usr/lib64/python3.6/ssl.py", line 1102, in connect
self._real_connect(addr, False)
File "/usr/lib64/python3.6/ssl.py", line 1093, in _real_connect
self.do_handshake()
File "/usr/lib64/python3.6/ssl.py", line 1070, in do_handshake
self._sslobj.do_handshake()
File "/usr/lib64/python3.6/ssl.py", line 648, in do_handshake
self._sslobj.do_handshake()
ssl.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897) 

Changes

 No changes were made to the setup.

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.